Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft
File:                     coYn-VAmUUtCZUBY9J7rm3xI8CA.mft (raw, json)
Hash identifier:          DYV2wTv7y2lMioRjWJqiWtrLCbponQ6k+Rn3HLPwRik=
Subject key identifier:   AA:4D:C9:E6:5F:B5:98:BA:7F:9B:DB:A5:E4:00:8B:4B:E9:3C:0F:B4
Authority key identifier: 72:86:27:F9:50:26:51:4B:42:65:40:58:F4:9E:EB:9B:7C:48:F0:20
Certificate issuer:       /CN=728627f95026514b42654058f49eeb9b7c48f020
Certificate serial:       019D27E017770858EAF85D1B93EABDE754A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/coYn-VAmUUtCZUBY9J7rm3xI8CA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft
Manifest number:          05A0
Signing time:             Thu 26 Mar 2026 02:01:30 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:30 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:30 +0000
Files and hashes:         1: W7IQ0gYxKitQBnBcdtE5nlhijE8.roa (hash: V0HmiVipVSUCDssqQ1zBus3ujIkvu0DIBcIZVK71Cfg=)
                          2: coYn-VAmUUtCZUBY9J7rm3xI8CA.crl (hash: Yzw96qbvrMEa6nyHljD7O5djgB0l+sDw8zVsHFBIbBM=)
                          3: pyOmUXV3BFCOQlJwIoYrg5wrmT0.roa (hash: 7autMQzAdyx4QKlmu8bdpt5hGwVhPnDaM4FdIwza0rQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/coYn-VAmUUtCZUBY9J7rm3xI8CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:17:77:08:58:ea:f8:5d:1b:93:ea:bd:e7:54:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728627f95026514b42654058f49eeb9b7c48f020
        Validity
            Not Before: Mar 26 02:01:30 2026 GMT
            Not After : Mar 27 02:01:30 2026 GMT
        Subject: CN=aa4dc9e65fb598ba7f9bdba5e4008b4be93c0fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:31:04:98:a8:b6:07:cf:ff:f4:5e:62:a7:09:
                    d8:6d:cf:a1:d7:f0:be:37:52:6e:7e:22:e8:9c:45:
                    9f:b7:c9:81:40:e6:08:dd:82:28:5e:8b:1c:80:38:
                    77:d5:a7:b5:4f:4e:86:8e:ac:32:99:b2:52:b3:f0:
                    09:6f:75:d7:46:eb:d8:9c:d6:5e:b3:0a:d0:99:d7:
                    bb:1a:12:62:f8:10:f5:4b:42:a6:b5:f8:b0:87:37:
                    83:b7:88:90:d4:a1:9a:8b:87:23:73:43:7e:f7:24:
                    a3:94:fe:7f:84:72:73:c8:78:9d:bf:8a:79:7f:d8:
                    fe:9f:3b:dd:13:ec:09:f6:b2:5d:bd:f4:96:e9:ea:
                    20:53:50:3c:ee:02:8b:66:aa:7f:3c:b1:79:8b:8b:
                    51:ae:08:e8:66:ca:2b:85:63:bd:28:71:af:c8:0c:
                    0e:dd:2f:35:81:75:40:e5:82:94:c3:aa:1d:a5:53:
                    4b:ea:a6:c3:b2:a6:9d:1e:cd:cf:05:cf:03:0e:34:
                    d2:7a:3d:75:26:5d:06:4d:6f:68:b4:e3:5a:35:61:
                    bd:cd:5c:ac:10:e2:8d:2c:95:86:ab:00:ff:c4:b3:
                    21:b9:9c:99:1b:84:63:a2:81:9b:8f:03:77:58:44:
                    b5:89:b9:d7:7e:4e:e7:7a:22:ba:b4:21:cc:7b:3f:
                    9f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4D:C9:E6:5F:B5:98:BA:7F:9B:DB:A5:E4:00:8B:4B:E9:3C:0F:B4
            X509v3 Authority Key Identifier:
                keyid:72:86:27:F9:50:26:51:4B:42:65:40:58:F4:9E:EB:9B:7C:48:F0:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coYn-VAmUUtCZUBY9J7rm3xI8CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:09:fd:9c:c9:d0:22:8e:90:cb:38:c6:97:27:dc:bc:f5:44:
         dc:e5:89:3a:a9:47:dc:9f:49:d6:58:d2:93:62:e8:a1:7a:e9:
         64:72:dd:73:f9:9c:4b:8c:b6:76:b3:74:03:89:72:86:64:eb:
         d4:e5:9f:50:37:c4:1b:1c:eb:c2:65:4f:b2:0e:ae:40:79:de:
         61:e8:a1:b1:f3:f2:02:07:fe:20:59:9b:61:88:4f:b9:19:bc:
         1a:9d:a8:2c:5f:c8:19:c5:d5:16:54:0e:e2:c1:d6:e8:9b:a9:
         da:17:eb:0f:3a:4d:73:35:1f:f0:27:4c:fa:12:65:1a:dc:96:
         ea:f9:c7:f9:09:3c:12:80:d3:c8:d4:7e:ea:2f:6e:6c:4c:a8:
         47:d7:e2:1f:89:31:6c:b6:58:ff:ad:43:bc:4c:f7:84:af:4d:
         7f:7e:c8:a3:4b:f9:e7:e4:7f:63:21:91:da:55:6d:50:7a:68:
         91:1c:7f:7b:50:e8:18:b1:14:fd:d0:c0:99:35:6e:37:23:31:
         a5:26:32:88:26:2b:3d:49:7e:62:f5:b4:d7:9c:5b:b1:aa:cc:
         c6:b2:43:7e:05:da:18:cf:77:37:34:99:79:83:b4:63:96:f9:
         d3:71:17:81:97:41:f8:ee:6d:84:c3:8a:4e:a2:33:9a:80:93:
         b0:27:d0:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4Bd3CFjq+F0bk+q951SlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyODYyN2Y5NTAyNjUxNGI0MjY1NDA1OGY0OWVlYjliN2M0
OGYwMjAwHhcNMjYwMzI2MDIwMTMwWhcNMjYwMzI3MDIwMTMwWjAzMTEwLwYDVQQD
EyhhYTRkYzllNjVmYjU5OGJhN2Y5YmRiYTVlNDAwOGI0YmU5M2MwZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zEEmKi2B8//9F5ipwnYbc+h1/C+
N1JufiLonEWft8mBQOYI3YIoXoscgDh31ae1T06GjqwymbJSs/AJb3XXRuvYnNZe
swrQmde7GhJi+BD1S0KmtfiwhzeDt4iQ1KGai4cjc0N+9ySjlP5/hHJzyHidv4p5
f9j+nzvdE+wJ9rJdvfSW6eogU1A87gKLZqp/PLF5i4tRrgjoZsorhWO9KHGvyAwO
3S81gXVA5YKUw6odpVNL6qbDsqadHs3PBc8DDjTSej11Jl0GTW9otONaNWG9zVys
EOKNLJWGqwD/xLMhuZyZG4RjooGbjwN3WES1ibnXfk7neiK6tCHMez+fWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpNyeZftZi6f5vbpeQAi0vpPA+0MB8GA1UdIwQY
MBaAFHKGJ/lQJlFLQmVAWPSe65t8SPAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY29Zbi1WQW1VVXRDWlVCWTlKN3JtM3hJOENBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOTZjZWUtOTAwOS00NThiLWFhNjAt
YjMzYTQwOTdiY2IwLzEvY29Zbi1WQW1VVXRDWlVCWTlKN3JtM3hJOENBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iOTZjZWUtOTAwOS00NThiLWFhNjAtYjMzYTQwOTdiY2Iw
LzEvY29Zbi1WQW1VVXRDWlVCWTlKN3JtM3hJOENBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQn9nMnQ
Io6QyzjGlyfcvPVE3OWJOqlH3J9J1ljSk2LooXrpZHLdc/mcS4y2drN0A4lyhmTr
1OWfUDfEGxzrwmVPsg6uQHneYeihsfPyAgf+IFmbYYhPuRm8Gp2oLF/IGcXVFlQO
4sHW6Jup2hfrDzpNczUf8CdM+hJlGtyW6vnH+Qk8EoDTyNR+6i9ubEyoR9fiH4kx
bLZY/61DvEz3hK9Nf37Io0v55+R/YyGR2lVtUHpokRx/e1DoGLEU/dDAmTVuNyMx
pSYyiCYrPUl+YvW015xbsarMxrJDfgXaGM93NzSZeYO0Y5b503EXgZdB+O5thMOK
TqIzmoCTsCfQug==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:08 2026 by rpki-client